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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 

LISTING OF CLAIMS : 

1-6 (Cancelled) 

7. (Currently Amended) A-In a computer system including a host computer and a 
storage system which has a first volume for storing data from the host computer and a second 
volume, and a storage control unit for controlling data transfer from the first volume to the 
second volume, a data protection apparatus coupled to the host computer and the storage 
svstem, for protecting data in a s torage volume in a computer system, with said computer 
s yst e m compri s ing said storag e volume assigned for storing data, a replicated volum e 
assign e d for storing data duplicated from said storag e volum e , and a storage control unit for 
controlling data transfer from said storag e volume to said r e plicated volume, wherein said 
rintn prot e ction apparatus compris e s comprising : 

an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data transfer 
from said first storage-volume to said second replicat e d volume, when said event detection 
unit detects an event; 

said computer system further comprising a comput e r for reading and writing data 
from and to said storage volume ; 

an illegal intrusion detection unit for detecting an illegal intrusion into said host 
computer; 

wherein said event detection unit receives a detection of the illegal intrusion from said 
illegal intrusion detection unit; and 

when said event detection unit receives the detection of the illegal intrusion, said 
replication stopping unit instructs said storage control unit to stop data transfer from said first 
s torage volume to said second replicated volume. 
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8. (Cancelled) 

9. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 7, wherein: 

said computer system further includes comprises a computer virus detection unit for 
detecting a computer virus in said storage system ; 

said event detection unit receives the detection of the computer virus from said 
computer virus detection unit; and 

when said event detection unit receives the detection of the computer virus, said 
replication stopping unit instructs said storage control unit to stop data transfer from said first 
storage volume to said second replicated volume. 

10. (Currently Amended) A data protection method for protecting data in a computer 
system including a host computer and a storage system which has a first volume for storing 
data from the host computer and a second volume, storage volum e in a computer syst e m, with 
said computer syst e m comprising said storag e volume assign e d for storing data, a comput e r 
for reading and writing data from and to said storage volume, a replicat e d volume assign e d 
for storing data duplicated from said storage volume, and a storage control unit for 
controlling data transfer from said storage first volume to said second replicated volume, 
wherein said data protection method comprises steps of: 

detecting an intrusion into said host computer; and 

instructing said storage control unit to stop data transfer from said first storage volume 
to said second replicated volume, when said intrusion is detected. 

1 1 . (Currently Amended) A program embodied on a storage medium that can be read by 
an information processing apparatus for making the information processing apparatus 
perform data protection of a storag e volum e in a computer system including a host computer 
and a storage system which has a first volume for storing data from the hos t computer and a 
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second volume , with said computer s yst e m comprising said storage volume assign e d for 
storing data, a comput e r for reading and writing data from and to said storage volum e , a 
replicat e d volum e assign e d for storing data duplicated from said storag e volum e , and a 
storage control unit for controlling data transfer from said storag e first volume to said 
second r e plicat e d volume, wherein said program makes said information processing apparatus 
perform processes of: 

detecting that an intrusion into the host computer has occurred; and 
instructing said storage control unit to stop data transfer from said first storage-volume 
to said second replicated volume, when said intrusion is detected. 

12-13 (Cancelled) 

14. (Currently Amended) In A acomputer system including a host computer and a 
storage system which has a first volume for storing data from the host computer and a second 
volume, and a storage control unit for controlling data transfer from the first volume to the 
second volume, comprising a storag e volum e assigned for storing data, a replicated volum e 
assign e d for storing data duplicated from said storage volume, a storag e control unit for 
controlling data transfer from said storage volum e to said r e plicated volume, and a data 
protection apparatus coupled to the host computer and the storage apparatus for protecting 
dntn in said storage volume^ wherein comprising : 

said data protection apparatus compris e s: 

an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data transfer 
from said first storage volume to said second replicated volume, when said event detection 
unit detects an event; 

wherein said computer system further comprises an alteration detection unit that reads 
given data in said plurality of replicated volumes to detect respective differences between the 
given data; and 
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the event detected by said event detection unit is a detection result of the differences 
between the given data, with said detection result being received from said alteration 
detection unit. 

15. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 

write data to said first storage volume is transferred by said storage control unit to said 
second roplicated volume with a delay of a given time. 

16. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 

as said replicated second volume, a plurality of second replicated volumes are 
provided; and 

said storage control unit switches a transfer destination of write data of said storag e 
first volume, at given time intervals among said plurality of replicat e d second volumes. 

17. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 16, wherein: 

data transferred to said plurality of second replicated volumes is further transferred to 
another plurality of second replicated volumes. 

18. (Cancelled) 

1 9. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 

said comput e r syst e m furth e r comprises a computer for r e ading and writing data from 
and to said storage volume; 

said storage control unit further controls communication between said host computer 
and said first storag e volume; and 
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said data protection apparatus instructs said storage controller to stop communication 
between said host computer and said first storage when said event detection unit detects said 
event. 

20. (Cancelled) 
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